CVE-2007-2520

CVE-2007-2520 affects MyNews 0.10. SQL injection in admin.php via the authacc cookie when PHP magic_quotes_gpc is disabled. The vulnerability allows remote execution of arbitrary SQL commands and could lead to data exposure or modification; impact is described as partial confidentiality/integrity...

CVE-2006-2520

CVE-2006-2520 affects BitZipper (versions up to and including 4.1.2 SR-1). The flaw is a directory traversal in archive handling: a filename within a stored archive (RAR, TAR, ZIP, GZ, JAR) can contain a .. sequence, enabling an attacker to create files in arbitrary directories on the host. This ...

CVE-2004-2520

The CVE-2004-2520 entry affects Gattaca Server 2003, version 1.1.10.0. The vulnerability arises in the POP3 handling where remote authenticated users can trigger a denial of service (application crash) by sending a large numeric value in the LIST, RETR, or UIDL commands. The available documents d...

CVE-2005-2520

The CVE-2005-2520 entry concerns Mac OS X 10.4 through 10.4.2, where the password assistant used to create multiple accounts from the same process fails to reset the suggested password list when the assistant is displayed. This behavior can allow an attacker to view recently used passwords, repre...